Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 
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Generating  imagery  for 
forecasting  terror  threats 


Greg  Schmidt,  Jason  Goffeney,  Jason  Dalton,  and  Ruth  Willis 


Maps  indicating  threat  levels  based  on  key  feature  proximity,  and  in¬ 
corporating  event  location  uncertainty ,  are  useful  for  planning  coun¬ 
termeasures  in  the  global  war  on  terror. 

Intelligence  analysts  and  military  planners  need  predictions 
about  likely  terrorist  targets  in  order  to  better  plan  the  deploy¬ 
ment  of  security  forces  and  sensing  equipment.  We  have  ad¬ 
dressed  this  need  using  Gaussian-based  forecasting  and  uncer¬ 
tainty  modeling.  Our  approach  excels  at  indicating  the  highest 
threats  expected  for  each  point  along  a  travel  path  and  for  a 
'global  war  on  terrorism'  mission.  It  also  excels  at  identifying 
the  greatest-likelihood  collection  areas  that  would  be  used  to  ob¬ 
serve  a  target. 

Our  methods  are  extensions  of  Donald  Brown's  work1  on 
geospatial  analysis  and  asymmetric-threat  forecasting  in  the  ur¬ 
ban  environment.  He  showed  how  to  extract  distinct  signatures 
from  associations  made  between  historical  event  information 
and  contextual  information  sources  such  as  geospatial  and  tem¬ 
poral  political  databases.  We  have  augmented  this  to  include  un¬ 
certainty  estimates  associated  with  historical  events  and  geospa¬ 
tial  information  layers.2 

Event  Forecasting  Spatial  Preferences 

The  notion  of  spatial  preferences  has  been  used  to  find  potential 
crime1  and  threat3  'hot  spots.'  The  premise  is  that  a  terrorist  or 
criminal  is  directed  toward  a  certain  location  by  a  set  of  quali¬ 
ties,  such  as  geospatial  features,  demographic  and  economic  in¬ 
formation,  and  recent  political  events.  Focusing  on  geospatial 
information,  we  assume  the  intended  target  is  associated  with 
features  a  small  distance  from  the  event  location.  We  assign  the 
highest  likelihoods  to  the  distances  between  each  key  feature 
and  the  event,  and  taper  them  away  from  these  distances.  This 
behavior  is  modeled  using  a  kernel  function  centered  at  each  of 
these  distances.  For  a  Gaussian  kernel  applied  to  a  discretized 
map,  the  probability  density  function  p  for  a  given  grid  cell  g 
and  uncertainty  estimates  u  is  given  by 


pfc «) = c  n  tt  I  m,  -  d„ + u(<pE,  &)), 

i=l  n= 1 


where 


m  = 


y/lncj2 


-92  /2cr2 


Dig  is  the  distance  from  feature  i  to  the  grid  cell,  Din  is  the  dis¬ 
tance  from  the  feature  to  event  location  n,  c  is  a  constant, 
and  (pF  are  the  position  uncertainty  for  event  and  features  re¬ 
spectively,  I  is  the  total  number  of  features,  and  N  is  the  total 
number  of  events.  Figure  1(a)  shows  a  sample  forecast  image 
based  on  this  approach,  denoting  threat  level  with  colors  rang¬ 
ing  from  blue  for  lowest  threat,  through  red  for  highest  threat. 
For  the  same  set  of  features  and  events.  Figure  1(b)  shows  a  more 
manageable  forecast — in  terms  of  allocating  security  resources — 
determined  by  aggregating  feature  layers  prior  to  generating  the 
likelihood  values. 


Modeling  Uncertainty 

One  of  the  most  important  aspects  of  forecasting  is  having  an 
estimate  of  the  confidence  in  the  supporting  numerical  values. 
In  numerical  weather  prediction,  there  is  always  a  value  of  con¬ 
fidence  assigned  with  each  forecast.  For  example,  predicting  an 
80%  chance  of  rain  implies  that  numerical  weather  models  given 
input  parameter  variations,  predicted  eight  out  of  ten  tries  that 
it  would  rain. 

Similarly,  for  our  event  forecasts,  we  have  identified  three  key 
sources  of  uncertainty.  These  are:  first,  positional  uncertainty  as¬ 
sociated  with  geospatial  locations  for  geographic,  demographic, 
economic,  political-event,  and  historical-event  data;  second,  er¬ 
ror  associated  with  feature  reduction;  and  finally,  methodologi¬ 
cal  error  associated  with  the  event  forecasting  algorithms.  Here, 
we  will  focus  only  on  the  positional  error  of  historical  event  lo¬ 
cations. 

The  historical  event  record  of  the  data  we  used  included  the 
date,  location,  type  of  attack,  organization  claiming  responsi¬ 
bility,  a  description  of  what  happened,  and  confidence  of  the 
recorded  data.  The  confidence  values  for  the  locations  are  rated 
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Figure  1.  Examples  of  threat  forecasts  are  shown ,  with  threat  likelihood  coded  hy  color ,  ranging  from  blue  for  lowest  threat  to 
red  for  highest  threat,  (a)  Several  high-level  threats  appear  in  this  example,  (b)  Feature  reduction  of  (a),  achieved  by  aggregating 
geospatial  information  layers ,  provides  a  more  manageable  forecast  for  security  resource  allocation,  (c)  Map  overlay  of  subregion 
hot  spots,  (d)  Threat  levels  are  more  widely  distributed  when  historical-event  position  uncertainties  are  incorporated  in  (c). 


from  1  to  5,  with  error  values  starting  at  ±10m  and  increasing  by 
a  power  of  10  for  each  rank.  The  ratings  represent  analyst  con¬ 
fidence  in  the  precise  event  location.  Error  values  in  the  event 
locations,  uE/  are  incorporated  into  the  distance  measurements 
by  setting  the  feature-to-event  distance,  Din/  to  Din  db  uE.  We  ac¬ 
count  for  this  variation  by  discretizing  the  distance  range,  and 
sampling  by  Monte  Carlo  simulation.  Figures  1(c)  and  1(d)  show 
the  impact  of  accounting  for  the  uncertainty.  These  forecast  im¬ 
ages  were  converted  to  Google  Keyhole  Markup  Language  and 
are  shown  in  the  Google  Earth  program,4  overlaying  the  correct 
georegistered  terrain. 

Conclusion 

We  have  explored  approaches  for  generating  forecast  imagery 
used  in  future  terror  event  predictions  that  include  data  uncer¬ 
tainty.  Our  future  work  will  primarily  focus  on  exploring  the  im¬ 
pact  of  more  types  of  uncertainty. 
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